CmdID

CmdID / Files

driver_ab811ca5.sys

Driver on Windows LOLDrivers malicious

A known malicious driver

from LOLDrivers
T1068Exploitation for Privilege Escalation

1 known sample

its entry

ab811ca59a8a8e92fff3eca9d359a8ed5482e781c97e63dbece046d929d0a79c

From LOLDrivers (Apache 2.0). A driver is known by its hash: a sample under another name is the same driver. In Ceplin, "<sha256>".whatis() says which sample a hash is.